This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kwE1huxWKsSQSxqhyyH044JSej8.roa File: kwE1huxWKsSQSxqhyyH044JSej8.roa (raw, json) Hash identifier: zC/Rw8fU5YBpCGKfFk/5neaZ6LhGK6Sx9AKXv3m7Ums= Subject key identifier: 93:01:35:86:EC:56:2A:C4:90:4B:1A:A1:CB:21:F4:E3:82:52:7A:3F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C03ED069833C1EDB8A58F9757D397D678 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kwE1huxWKsSQSxqhyyH044JSej8.roa Signing time: Wed 28 Jan 2026 09:26:31 +0000 ROA not before: Wed 28 Jan 2026 09:26:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.8.23.0/24 maxlen: 24 45.90.16.0/24 maxlen: 24 45.90.17.0/24 maxlen: 24 45.131.134.0/24 maxlen: 24 185.108.204.0/24 maxlen: 24 185.126.82.0/24 maxlen: 24 185.199.54.0/24 maxlen: 24 185.199.158.0/24 maxlen: 24 185.199.159.0/24 maxlen: 24 185.206.251.0/24 maxlen: 24 185.209.38.0/24 maxlen: 24 185.209.73.0/24 maxlen: 24 185.209.74.0/24 maxlen: 24 185.209.75.0/24 maxlen: 24 185.210.233.0/24 maxlen: 24 185.210.235.0/24 maxlen: 24 185.214.108.0/24 maxlen: 24 185.218.20.0/24 maxlen: 24 185.218.101.0/24 maxlen: 24 185.220.248.0/24 maxlen: 24 185.220.249.0/24 maxlen: 24 185.220.250.0/23 maxlen: 24 185.221.20.0/24 maxlen: 24 185.222.28.0/24 maxlen: 24 185.222.29.0/24 maxlen: 24 185.223.80.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 185.225.1.0/24 maxlen: 24 185.225.2.0/24 maxlen: 24 185.225.3.0/24 maxlen: 24 185.226.104.0/24 maxlen: 24 185.226.105.0/24 maxlen: 24 185.226.107.0/24 maxlen: 24 185.227.144.0/24 maxlen: 24 185.227.146.0/23 maxlen: 24 185.227.147.0/24 maxlen: 24 185.228.72.0/24 maxlen: 24 185.228.75.0/24 maxlen: 24 185.232.206.0/24 maxlen: 24 185.234.22.0/24 maxlen: 24 185.246.112.0/24 maxlen: 24 193.8.112.0/23 maxlen: 24 193.8.112.0/24 maxlen: 24 193.8.114.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 193.58.146.0/23 maxlen: 24 193.58.146.0/24 maxlen: 24 194.5.67.0/24 maxlen: 24 194.76.169.0/24 maxlen: 24 194.76.172.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:ed:06:98:33:c1:ed:b8:a5:8f:97:57:d3:97:d6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 28 09:26:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93013586ec562ac4904b1aa1cb21f4e382527a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:e7:ef:b6:10:06:8e:1b:02:f2:f3:8b:7f: 15:80:de:df:90:3b:50:8c:16:4a:fe:89:51:e9:80: 86:44:f3:12:98:c5:7c:c9:b2:ac:77:2d:66:2d:1a: 77:18:2b:66:69:80:f5:17:5c:57:f5:19:bc:a4:9e: 56:82:c9:33:39:11:56:41:a1:11:52:32:09:a8:7d: aa:96:68:4c:f1:08:dc:15:7a:c5:f7:f5:1a:5d:d4: a0:c6:aa:ca:31:fa:73:8b:d9:65:75:13:dd:c8:88: 50:5a:0f:66:d9:f0:ef:07:e1:e6:37:53:4b:1e:c0: 49:05:a7:61:8c:cd:bc:a9:26:1d:3d:7a:16:91:6d: 75:8d:61:ca:c7:b5:6a:69:37:cb:d4:6f:a5:89:3f: aa:2f:7f:f6:c2:4f:b7:6c:7a:ff:af:4d:a4:0c:b3: 5e:e3:2e:56:48:d2:e7:b6:e5:02:f2:b5:e7:3e:98: e5:16:57:72:53:2c:40:5d:c5:e2:57:40:23:8a:8f: 4b:a6:f7:30:7a:da:5c:75:50:20:c0:63:7b:e2:14: 5b:ec:0e:5c:5a:8d:f8:d3:a1:c2:bd:7d:fe:db:4d: 11:48:00:b4:f6:82:67:56:dc:57:ac:47:0c:5a:6b: 6e:5f:71:91:2a:42:5c:06:0e:f6:c2:f2:bd:7d:bb: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:35:86:EC:56:2A:C4:90:4B:1A:A1:CB:21:F4:E3:82:52:7A:3F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kwE1huxWKsSQSxqhyyH044JSej8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.23.0/24 45.90.16.0/23 45.131.134.0/24 185.108.204.0/24 185.126.82.0/24 185.199.54.0/24 185.199.158.0/23 185.206.251.0/24 185.209.38.0/24 185.209.73.0-185.209.75.255 185.210.233.0/24 185.210.235.0/24 185.214.108.0/24 185.218.20.0/24 185.218.101.0/24 185.220.248.0/22 185.221.20.0/24 185.222.28.0/23 185.223.80.0/24 185.223.155.0/24 185.225.0.0/22 185.226.104.0/23 185.226.107.0/24 185.227.144.0/24 185.227.146.0/23 185.228.72.0/24 185.228.75.0/24 185.232.206.0/24 185.234.22.0/24 185.246.112.0/24 193.8.112.0-193.8.114.255 193.58.144.0/24 193.58.146.0/23 194.5.67.0/24 194.76.169.0/24 194.76.172.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption c4:98:c0:a1:ec:a5:45:bb:2a:1c:e5:df:eb:33:04:10:bc:cc: ae:a9:20:8f:e0:1f:6b:7e:d6:43:9b:b0:6d:f6:f0:53:12:1d: aa:72:df:35:3e:16:16:5b:9b:4d:aa:3f:c8:b6:74:a7:ac:b3: 10:2c:d9:42:e3:f2:bb:10:b4:ea:69:e2:96:ce:46:a3:80:52: dc:22:0d:c5:3e:92:b7:78:7a:db:6f:5c:0c:46:f1:81:4d:ee: ea:d9:8a:f7:ce:c5:4c:9c:0f:4f:e8:45:7b:2f:91:95:66:de: 54:36:8a:ea:0e:50:63:e2:37:40:51:d9:cd:5d:bd:04:44:1d: aa:72:20:dd:14:74:1b:0e:b5:30:54:c0:33:dd:dc:31:a2:a8: 9e:6d:6e:c5:db:76:db:6a:81:79:e8:d5:82:9a:8e:f0:7c:b2: 47:15:ad:02:bf:a4:c6:09:2a:16:04:4a:23:2b:eb:1e:60:b6: 4a:a4:81:53:20:c7:8f:61:22:1d:0a:41:c9:45:1a:2b:f7:38: df:ff:1e:a4:e7:48:df:cc:4b:41:8b:eb:6b:0d:23:c1:5b:9f: cc:f8:73:26:5d:ad:a6:8e:e3:c8:fc:d2:53:6e:1b:d4:52:39: 1e:89:98:09:de:b6:92:88:69:df:00:c8:d9:eb:3a:2c:49:e5: 31:59:08:9b -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZwD7QaYM8HtuKWPl1fTl9Z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTI4MDkyNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzAxMzU4NmVjNTYyYWM0OTA0YjFhYTFjYjIxZjRlMzgyNTI3YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G/n77YQBo4bAvLzi38VgN7fkDtQ jBZK/olR6YCGRPMSmMV8ybKsdy1mLRp3GCtmaYD1F1xX9Rm8pJ5WgskzORFWQaER UjIJqH2qlmhM8QjcFXrF9/UaXdSgxqrKMfpzi9lldRPdyIhQWg9m2fDvB+HmN1NL HsBJBadhjM28qSYdPXoWkW11jWHKx7VqaTfL1G+liT+qL3/2wk+3bHr/r02kDLNe 4y5WSNLntuUC8rXnPpjlFldyUyxAXcXiV0Ajio9LpvcwetpcdVAgwGN74hRb7A5c Wo3406HCvX3+200RSAC09oJnVtxXrEcMWmtuX3GRKkJcBg72wvK9fbvS5QIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFJMBNYbsVirEkEsaocsh9OOCUno/MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEva3dFMWh1eFdLc1NRU3hxaHl5SDA0NEpTZWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA LQgXAwQBLVoQAwQALYOGAwQAuWzMAwQAuX5SAwQAucc2AwQBuceeAwQAuc77AwQA udEmMAwDBAC50UkDBAK50UgDBAC50ukDBAC50usDBAC51mwDBAC52hQDBAC52mUD BAK53PgDBAC53RQDBAG53hwDBAC531ADBAC535sDBAK54QADBAG54mgDBAC54msD BAC545ADBAG545IDBAC55EgDBAC55EsDBAC56M4DBAC56hYDBAC59nAwDAMEBMEI cAMEAMEIcgMEAME6kAMEAcE6kgMEAMIFQwMEAMJMqQMEAMJMrAMEAMJ8RTANBgkq hkiG9w0BAQsFAAOCAQEAxJjAoeylRbsqHOXf6zMEELzMrqkgj+Afa37WQ5uwbfbw UxIdqnLfNT4WFlubTao/yLZ0p6yzECzZQuPyuxC06mnils5Go4BS3CINxT6St3h6 229cDEbxgU3u6tmK987FTJwPT+hFey+RlWbeVDaK6g5QY+I3QFHZzV29BEQdqnIg 3RR0Gw61MFTAM93cMaKonm1uxdt222qBeejVgpqO8HyyRxWtAr+kxgkqFgRKIyvr HmC2SqSBUyDHj2EiHQpByUUaK/c43/8epOdI38xLQYvraw0jwVufzPhzJl2tpo7j yPzSU24b1FI5HomYCd62kohp3wDI2es6LEnlMVkImw== -----END CERTIFICATE-----Generated at Wed Jan 28 18:30:35 2026 by rpki-client